This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json) Hash identifier: hhArw5z1n/37uDvMU6mx2QwatrsYnqTqZ59dferyQ90= Subject key identifier: 8E:CA:60:9A:B4:0D:DB:C0:A5:22:F0:1A:1C:D3:D5:0E:49:F7:BA:E3 Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11 Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511 Certificate serial: 019B39B3E180897E8401B0C1192B06AEB7C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft Manifest number: 0E14 Signing time: Sat 20 Dec 2025 03:00:48 +0000 Manifest this update: Sat 20 Dec 2025 03:00:48 +0000 Manifest next update: Sun 21 Dec 2025 03:00:48 +0000 Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=) 2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: VupFbpFqSesxahd0Ibq0QymwE/SpKO9LVT6gvCPnqI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:e1:80:89:7e:84:01:b0:c1:19:2b:06:ae:b7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511 Validity Not Before: Dec 20 03:00:48 2025 GMT Not After : Dec 21 03:00:48 2025 GMT Subject: CN=8eca609ab40ddbc0a522f01a1cd3d50e49f7bae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:1c:40:d4:9a:19:96:88:59:77:84:45:f4: f4:e1:4b:5f:59:a4:b2:4d:b9:71:aa:2c:d0:a4:0c: 6c:91:a3:7a:53:19:30:99:36:c5:f5:cc:64:f6:4b: f4:c0:7b:3d:2c:18:9c:03:0d:06:1e:d2:8c:10:82: 4c:74:83:d1:eb:31:4c:b4:ff:c1:01:45:8b:4e:6f: 93:c1:56:90:90:9c:ed:f1:3e:91:72:95:fd:46:97: 17:ca:c9:eb:c3:ef:ab:a5:ba:c1:11:4f:23:ea:32: d0:68:ee:c8:39:c1:25:40:81:c6:87:22:5f:7b:4a: 3a:77:5c:ec:0e:eb:1b:1b:5d:39:0c:c8:c1:91:dd: 69:08:5a:dc:a1:2e:32:f2:93:0b:1a:b1:02:27:19: 7e:01:a0:43:69:9f:33:70:62:4e:40:24:c1:f1:74: ee:1e:54:e0:93:ab:f6:10:3c:46:7e:6d:f9:bb:56: ab:fd:0f:6b:92:8a:c7:ec:6f:9a:ca:a7:15:a6:86: 41:55:13:00:3b:dc:f4:0c:01:42:85:c0:bb:56:a8: 28:f0:13:f7:07:5e:7b:f9:39:f7:60:d0:84:7b:fe: 85:2f:97:a4:9e:ba:6b:f6:0d:58:29:be:f9:9f:86: c5:ee:1d:2b:f2:9f:f1:f8:e9:37:e8:36:dc:93:8d: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CA:60:9A:B4:0D:DB:C0:A5:22:F0:1A:1C:D3:D5:0E:49:F7:BA:E3 X509v3 Authority Key Identifier: keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:6f:77:bf:13:58:6d:af:d0:b0:8f:85:e5:62:a9:0e:79:c9: 13:46:ec:a2:a7:cf:9e:84:ba:ec:1d:4a:e6:1a:22:3d:b7:52: 44:b6:5d:02:e0:ca:8d:77:e8:29:d7:5d:21:0c:64:36:68:2b: 60:fd:7d:a2:8f:70:4d:7d:f6:c2:51:9f:8a:13:d4:7f:eb:f2: f0:5b:f7:96:a2:8d:2c:66:b9:1e:b3:18:07:ce:46:f5:ef:09: 03:be:3b:47:c3:6e:d4:7b:19:4f:7a:27:c4:e8:e9:08:59:39: 0f:90:0a:bb:35:96:e6:02:b3:31:cd:5c:ab:ce:5c:dd:34:e4: 49:68:63:4e:52:ad:6b:5f:2d:07:5b:96:1b:7c:e3:ff:f8:1d: d4:ba:89:6f:cb:ae:1b:e2:a5:31:06:56:bd:60:ea:65:ff:6c: cf:48:16:40:3d:84:85:79:6b:91:4d:8f:c0:22:a8:61:26:41: 9c:5d:b3:02:16:e6:68:9a:2e:89:05:b9:42:24:2b:81:c9:78: 99:27:eb:71:e7:0b:99:e4:ee:92:13:d0:da:29:14:27:73:1e: 43:dc:3c:db:cc:95:7e:89:ec:41:38:89:65:39:5c:91:a5:34: 4d:e8:81:1b:57:df:6e:af:c6:20:2d:ad:94:df:18:d4:87:19: f0:c7:54:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+GAiX6EAbDBGSsGrrfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl OGM1MTEwHhcNMjUxMjIwMDMwMDQ4WhcNMjUxMjIxMDMwMDQ4WjAzMTEwLwYDVQQD Eyg4ZWNhNjA5YWI0MGRkYmMwYTUyMmYwMWExY2QzZDUwZTQ5ZjdiYWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0wcQNSaGZaIWXeERfT04UtfWaSy TblxqizQpAxskaN6UxkwmTbF9cxk9kv0wHs9LBicAw0GHtKMEIJMdIPR6zFMtP/B AUWLTm+TwVaQkJzt8T6RcpX9RpcXysnrw++rpbrBEU8j6jLQaO7IOcElQIHGhyJf e0o6d1zsDusbG105DMjBkd1pCFrcoS4y8pMLGrECJxl+AaBDaZ8zcGJOQCTB8XTu HlTgk6v2EDxGfm35u1ar/Q9rkorH7G+ayqcVpoZBVRMAO9z0DAFChcC7Vqgo8BP3 B157+Tn3YNCEe/6FL5eknrpr9g1YKb75n4bF7h0r8p/x+Ok36Dbck4252wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7KYJq0DdvApSLwGhzT1Q5J97rjMB8GA1UdIwQY MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct OTY4NTU1NTE5MGM0LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0 LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz293vxNY ba/QsI+F5WKpDnnJE0bsoqfPnoS67B1K5hoiPbdSRLZdAuDKjXfoKdddIQxkNmgr YP19oo9wTX32wlGfihPUf+vy8Fv3lqKNLGa5HrMYB85G9e8JA747R8Nu1HsZT3on xOjpCFk5D5AKuzWW5gKzMc1cq85c3TTkSWhjTlKta18tB1uWG3zj//gd1LqJb8uu G+KlMQZWvWDqZf9sz0gWQD2EhXlrkU2PwCKoYSZBnF2zAhbmaJouiQW5QiQrgcl4 mSfrcecLmeTukhPQ2ikUJ3MeQ9w828yVfonsQTiJZTlckaU0TeiBG1ffbq/GIC2t lN8Y1IcZ8MdUrg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:52:51 2025 by rpki-client